Re: GPO is ignored after 2 weeks

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Lanwench,

Except if the user copies iexplore.exe to another file name, right? :-)

Sure, but the user has not done this. The GPO has just stopped working. I'm
missing something pretty basic, here :o)

I'll try your suggestion of m.p.windows.group_policy and see if any bells
ring over there.

Dave

"Lanwench [MVP - Exchange]"
<lanwench@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:eniakVbJJHA.1636@xxxxxxxxxxxxxxxxxxxxxxx
Dave Francis <dave@xxxxxxxxxxx> wrote:
Hi all,

I have to stop some users on an SBS R2 accessing the Internet so I
split those users in to a new group and added a simple GPO to that
group that prevented iexplore.exe from running. Worked fine. (Set up
was done via server management).

Except if the user copies iexplore.exe to another file name, right? :-)

Two weeks later, and I don't see any changes but the GPO is being
ignored and all users can run iexplore. I am obviously missing
something pretty damned obvious here. I have added other restrictions
to the GPO and they are ignored too.

rsop.msc, event viewer, and gpresult may help. You could also post in
m.p.windows.group_policy for more expert help.

Can anyone put me out of my misery and suggest what the obvious might
be???
TIA

Dave F





.

Relevant Pages

  • Re: Help w/ User Must Change Password at next Logon"
    ... I think that the missing part is that there is a GPO that disallows users to ... password age setting that will disable the users ability to change the ...
    (microsoft.public.windows.server.active_directory)
  • Problems deploying Printers with Server 03 R2
    ... I then choose a GPO, which would be the Default one, I also check apply to ... the same Domain Admin account that I log onto the print server with. ... There are no errors generated in the event log for this either. ... What am I missing here? ...
    (microsoft.public.windows.group_policy)
  • Re: WSUS clients not going
    ... Is the server specified in the GPO ... I have approved ALL the updates for that computer. ...  when I run the clientdiag tool I ... Maybe I'm missing something obvious. ...
    (microsoft.public.windows.server.setup)
  • Re: UserName variable in wsh
    ... I knew it was something simple I was missing there but was to engrossed. ... >> Currently creating a new script to place in our GPO. ...
    (microsoft.public.scripting.wsh)
  • Re: Login Script
    ... Don't have time to fully investigate your suggestion ... here for GPO, I'll look at it with the New Domain. ... drives are mapped for different users. ... mapped to T drive based on security group membership, ...
    (microsoft.public.windows.group_policy)